Unity Forums Hacked...

edited in General
For those of you that are a member of the Unity Forums, they have been hacked and the hackers could have access to about 2 million passwords.

Rather safe then sorry, maybe change your passwords if they are the same on the other Unity platforms.

https://www.kotaku.com.au/2017/05/unity-3d-forums-hacked-by-ourmine/

Over the weekend, security hacker group OurMine gained access to the Unity 3D database. It doesn't appear to have caused much more trouble than changing the image on the forum, but if you're a Unity developer, you'd be smart to change your passwords.
https://www.reddit.com/r/Unity3D/comments/68htdw/unity_forums_hacked/
Thanked by 1MrNexy

Comments

  • Thanks for the headsup!
    Thanked by 1quintond
  • edited
    So just an update ... it looks like the passwords were not compromised ... but as I said better safe than sorry.

    Hi all,

    On April 30, our public forum website was attacked and successfully compromised due to poorly implemented password routines; our investigations show no theft of passwords in this attack, nor impact to any other Unity service.

    However, the attack did result in defacement of the site (which has since been fixed) and subsequent messaging to all of our registered forum users.

    We’re actively working to improve the authentication options in our services, and to help protect your data we’ll be rolling out the following in the next few weeks:

    2FA Authentication
    2FA will enable you to use one time passwords tied to the Unity Authentication platform. This will also be enforced in forums.

    Device Identification
    Device Identification will alert and/or prompt you if a new PC or Mobile device tries to connect to a Unity service, with your credentials.

    Password Policy
    Enable a per organization password reset, rotation and strength policy.


    We’re sorry. We know you put your trust in us. We will learn from our mistakes.

    Andreas Haugsnes

    Director of Security
    https://blogs.unity3d.com/2017/05/01/unity-forum-hack-update/
Sign In or Register to comment.